Static | ZeroBOX

PE Compile Time

2022-06-20 20:25:10

PDB Path

C:\sivesonefag.pdb

PE Imphash

0af0ab32fec6d387d477684bace95bf2

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00404758 0x00404800 7.99900970245
.data 0x00406000 0x0017c41c 0x00001800 1.88878964333
.rsrc 0x00583000 0x003918c8 0x00019a00 4.13246358572
.reloc 0x00915000 0x00005042 0x00005200 1.35976324632

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x0059c048 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0059c048 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0059c048 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0059c048 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0059c048 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0059c048 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0059c048 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_CURSOR 0x0059c048 0x000000b0 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_ICON 0x00598068 0x00000468 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN GLS_BINARY_LSB_FIRST
RT_STRING 0x0059c760 0x00000166 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_STRING 0x0059c760 0x00000166 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x0059c0f8 0x00000022 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x0059c0f8 0x00000022 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x0059c0f8 0x00000022 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x005984d0 0x00000076 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN data
RT_GROUP_ICON 0x005984d0 0x00000076 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN data
RT_GROUP_ICON 0x005984d0 0x00000076 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN data
RT_GROUP_ICON 0x005984d0 0x00000076 LANG_PORTUGUESE SUBLANG_PORTUGUESE_BRAZILIAN data
RT_VERSION 0x0059c120 0x00000208 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library KERNEL32.dll:
0x401000 GetComputerNameA
0x401004 CreateMutexW
0x401008 FindResourceA
0x40100c EnumCalendarInfoA
0x401010 lstrlenA
0x401018 EnumDateFormatsExW
0x40101c AddConsoleAliasW
0x401020 SetTapeParameters
0x401024 GetModuleHandleW
0x401028 GetTickCount
0x40102c GetConsoleAliasesA
0x401034 GlobalAlloc
0x401038 LoadLibraryW
0x40103c ReadConsoleInputA
0x401040 CopyFileW
0x401044 ReadFile
0x401048 GetVolumePathNameA
0x40104c DisconnectNamedPipe
0x401050 GetProfileIntA
0x401058 GetLastError
0x40105c SetLastError
0x401060 GetProcAddress
0x401068 IsValidCodePage
0x401070 LoadLibraryA
0x401074 OpenMutexA
0x401078 CreateHardLinkW
0x40107c lstrcmpiW
0x401080 SetLocaleInfoW
0x401084 CreateMutexA
0x40108c _lopen
0x401090 GetVersionExA
0x401098 AddConsoleAliasA
0x40109c lstrcpyA
0x4010a0 CreateFileA
0x4010a4 CloseHandle
0x4010a8 WriteConsoleW
0x4010ac GetConsoleOutputCP
0x4010b0 WriteConsoleA
0x4010b4 SetStdHandle
0x4010b8 FlushFileBuffers
0x4010c4 Sleep
0x4010e0 HeapFree
0x4010e4 MultiByteToWideChar
0x4010e8 ExitProcess
0x4010ec GetStartupInfoW
0x4010f0 RtlUnwind
0x4010f4 RaiseException
0x4010f8 WriteFile
0x4010fc GetStdHandle
0x401100 GetModuleFileNameA
0x401104 HeapAlloc
0x401108 HeapCreate
0x40110c VirtualFree
0x401110 VirtualAlloc
0x401114 HeapReAlloc
0x401118 SetHandleCount
0x40111c GetFileType
0x401120 GetStartupInfoA
0x401124 TerminateProcess
0x401128 GetCurrentProcess
0x40112c IsDebuggerPresent
0x401130 TlsGetValue
0x401134 TlsAlloc
0x401138 TlsSetValue
0x40113c TlsFree
0x401140 GetCurrentThreadId
0x401144 HeapSize
0x401148 GetCPInfo
0x40114c GetACP
0x401150 GetOEMCP
0x401158 GetModuleFileNameW
0x401164 GetCommandLineW
0x40116c GetCurrentProcessId
0x401174 GetLocaleInfoA
0x401178 GetStringTypeA
0x40117c GetStringTypeW
0x401180 SetFilePointer
0x401184 WideCharToMultiByte
0x401188 GetConsoleCP
0x40118c GetConsoleMode
0x401190 LCMapStringA
0x401194 LCMapStringW
Library USER32.dll:
0x40119c EnumDesktopWindows
0x4011a0 CharToOemBuffA
0x4011a4 GetMenuBarInfo
0x4011a8 CharLowerBuffW
0x4011ac CharUpperBuffA
0x4011b0 LoadMenuW
0x4011b4 CharUpperW
0x4011b8 LoadBitmapW
0x4011bc DdeQueryStringA
0x4011c0 SetClipboardViewer

!This program cannot be run in DOS mode.
`.data
@.reloc
bad allocation
Unknown exception
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
(null)
`h````
xpxxxx
bad exception
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
`h`hhh
xppwpp
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
CONOUT$
bad allocation
xucebugafukuwuvekesacubupopijege
%s %f %c
VirtualProtect
nosagonexefohutu hopavedul suvedofosayatujuketujav
kesitakopumo
C:\sivesonefag.pdb
D$(1D$
L$ _^]
QQSVWd
0SSSSS
j@j ^V
0A@@Ju
>=Yt1j
QQSVWh
HtHu4j
s[S;7|G;w
tR99u2
v$;5ln
0SSSSS
PPPPPPPP
0SSSSS
PPPPPPPP
URPQQh,
t"SS9]
0WWWWW
AAFFf;
;t$,v-
UQPXY]Y[
t+WWVPV
>J%*^
izi[Ak*
T'go=G
~3'FZe'\
=uDPg]
]`2R1r
-bn@KX+
-^4=88
:tO(E),
9;s${Y
ORNY[!
z/=Q[.j#
GvS1pF"
kn@_5#
X~a25
<!h)[]=
Ni-Tm
p02|KUx<?
=$!.Ik
BXRfcb
RRckOy
8Mo]>m*
D$B!6G4
Z{i%$`
nCFMhl
Oo=EA
@7F({P
"')0(<
Fa4EMx
l^>&S^g
*fW|/i
um*eYC>8 a
-Z3S7/
h4+//
tovBKRz
Nexvn0A
"Hv7'U
.dB(^a
g6_Et\
1,wHu~
}3n<B0
(O)<pD
AuQ_=`
\m Q}<
_4jniL\(
~U)%Gs
rho^xq
/2AbBF
;(aHyI7
5+RG)K
m\Bzi2a
z5`_e0
"y@%9A
;{Ob4
$e>0Ar
C;;kiX
M,nRV5
w,8&ow
@*\0$`
Uu\M.*
#hE1\
wwv:x]
](N`S0
&dmD~J:
y%Y|wg
gEL9@P/
6;po.GE
3'[_&t
>%d#-D
SsRE.f
?SaJ(
R.y\W!
{)#ej,
9+ &!'
>D>#vE
w1X)}*
r}H6h9
Z]u Q1Oz
{$yoOj
|0?F}x
jzi*(L,=
y-~gGWzI
geOL[N
-x;`)m
21#PkF
$=M5(h
>3K}WI(`qsM
f!!M}T
?oifHIe
#zRQB!
<hJ\P
{<b*!V
xu[8W{
$BS1sI
^n[15 5
D_Nb,H
_~:V'J
evOpZu
R>'N~7l
u*os/8<bU
o=W|U2
)s[);k
4C^7c4
*Pr3n]
PjvC]"
lYs)&&lR0
Y=aHvj
9X3:Ed
I{xGtv
pq+ST!
uNXBS>~
W[fAzd
fHZbLx
SZw4A|_B
36x%_T
ftZ#Z3
89PU2*
'M.)s
.#XQsisp
dq@+sP@
Yk+cqq
1CYA{
cn,"d;
O?^k9<5
.`k[Lj
(1&>:-5
#!=2.P
&WR,$:s
pzmu3W
LsfkW2
V95QICi7
B*R:w?
MH]#Iu
Sq"^=_+
o7uE_n7
D8|q5;
2/zF&=
.'Ht#(
JY20GPV
X#^NN08z
KJg=-p
;MYB9u
()^<5!
;?yaH.T8
dkL-[2|w
O?W|:%
".U5P!
Cj|g0lM
~Dx_.^Ct
VEU;96
a4f$!+2
XcA.jz
8VTS0L
=-;T&|
?"1>++
? PAYj
mWLC,g&
8pJe:j
f1@A%{Y
T+I^<A
IyvzXG|
=f)5XT
yvxO^f
\(+!6,
\(>2QZE
znY? N
]QZk't
c`K[:V*6
7He6C2
M3\D1=+
ad`+G^
IkD+1tN
kIx'q\P~1it
_Qr"(V
AE+Z8Um)
?;p&(F.
]miOcMR
)^P@%WbC
n^lXkI
x_L*hC
tL_piu6
aO02Ip
0TAYh:r
S`!:e'lz
tnpN!q
2WaIl.
-?GYwr
DDE .4
(aRdvx.w
RU"L1L
WoTD{R
EjPSj(]
e&+5{LG
]:;E?X
?fq>e|
V"TZsk'
/rht:4
W>XyG*
p-@)QnS
F,! 1<C7Y
ZMcu`
ERe~(Mik
n.av[2
>E^Xvn
&v?L0r
nSrJdq*
"d')NT
V:F#N\
M$^;&s
$qC@t<Jce
V{1Z6+
uP"?3&
&"t}?j
B.|<q<
;Q,Gg-
X2A0v*
qUo6@D
2O#P?K0\
]{B0fC
S%yFh=
j8pwO$
Me&/UXd]N
}%/*1d
wM_3cfSy#
h!B)9Y
JE[2Ee
3Zibaq
Lp[&FV
Dqwm/g
D1;8J}
kBd.*C
]RMs5?
%a)mqy
P&-Vyv
x;Jn2#
93vOsA
tejiIm U
qA/?jy
+C-=\q}k
BS&kQi
dpoB[7
xuOcrL
c{`>V=
fG:/))
54B-2Pk
"BxSpGT
%]K7I*
$n"k:!
u}ya#E
/j:myBt&R/
WxD.qe1
tJxpq
<2rZSF
2]x8x]j
)[Fxb"
.aUE[Y
,wq_@1
E{ mEs
UcIf<
`hA[&!
:n|Vm]mA
,f%9FMK
j4Z6jw
H<8ScS
B1XkY)
8p+"*C
+dyS.w:
;'9 R
(MF>2_{
`VL/?m
}1w_dCf
|R:Sa4
pKR}ss6
q633cc^(l
&|~z/zs
HrgLI&)1H
}=.p1|
oeVC^i
k36U/S
%JAbV!
D0EA/:;
N9/{sCbeZj
g]AC~C
_[kSg
W]FARzakM
VK1l)R
u:G?*\
p3nnV&6"
!;xgV_pg
{F,N&9
3DrqW!
F^8YD*
s0S_F9
k&S!F&5
+R:"Ii
`"/{|'
}['P$I-
cgE#)II
[e;TG]
-`gAVzPA$
J[iDV.
#o\k*!
qn<K^:4Qk
aM+%~\1-
[nmS(vj
Gs3Mc@3M
=jh)XGj
^/kaCb
K#1[=i
7[fC=G
Xz!qB:I)p
S6B>$
?MrQLMK
{7=Jm8
R(e9yP_K
fBh}+Z
#U?@,
`M?"k-
(2*3xd
S|8L/WKC
l"rpIPFX
Qbm+LuB&G
nzE09%
@O&VTO
&)|b.d@
T*uWG&t
"tqrA|p
)^:'Q*
+jb^tiX
?$m{'/C
MG'a?5
%"o.>F
iV@]=!
RqMOP-
LqU&Cgd{
N{8wrc
Fa"-9,
B#ewA)
inn=#'
=i!o*=
iO|oub
-\&amm,F
]^m"^\
s8 DG1
'JyUFn
[[KjDx
ty&jPys
eSOrEi(=
,0WkM
-7VJ6X
A=!T%5
$#CTI2~R
uk%=y
Ojyh\n
U0*`{CH
TJ`4uF
h>!7:-
f g?.cJ$
,<!5dya
vy)['}K
9A|TW.
/>3NQ:o
S:rIT\C<{L
RDcB&2
o-aj(Hr!4
^eX,Vi
LP?8;k
=f[xa
\!Z5,2
6fH[y>
kSnS^
j):U{E
Sn?RHg
.4dXV%
tS@9P:
h3F?_f
9wuX4N
^%;OuIw
zruv62
;_F<(t
zkZr{
zlUjUA6
x7>dwY
.'#ZPo'{Sd
3_Vifx
t3XjG9A
y5o@m&
DC=;M#z3
&K2vJ$
F/ZjD5)
*TrhnH
}%%\x4-
/pC1]7s
FHT<wtO9
&Lq|9~J
0z?}`
HUTNX_
usC.znr!
e,L#bT
$peN+,P'i`/:r
Prd?ybu$
e6c}3\
2fn ;NG
+#K`z6
4.?l(}z(~\&
B^wYv}
M 0\#
0Q= 61;
qTf7>az
?@'Sl>
+Ci,HUop
_ggsQ%
|a3[rM
)caRf~
c}.%7V
G(0a$}L
*.XGV6P
o&.y@6
lgrL|#
kb9NR^
"=5(#E{
,Yve2w
bkw[Ly
\{]Efg
(,CJ,Mz
OS|IJ=
8r={3
6L\`@q
]<T53x,
{saNg&
)2tJ75
f65cWP
1KO-#u
A%XAIR
?Gf[d'
>LK:t
IF~w,|
/y!('g
PI/jB;
1Fl(8b
4]{>P0
)1UT`}
<7z9K_:
*B9Ky~
<dLPaY
qg"Tqw
b(Y0Y8r
qApoc6
C5g0t.$
A;mN[6%,'
z^VYR9.
aMFQ2 v
\%E/2m
^_VlVpf
e 3go:
L~XMpM
xB}'F2
"I8>oW
|>S2kC
.J/Ce1n
KdLv<$
[;+z/|
lt&Ql5
Dhi'EL
ftt 6Dh
R\(fA6mv[
0$Ot<m
gXhxv%
w^^_.P
!RW}iJ
0%R$'C
3dqOY}
/!?';g
R`=u.N
T>Wl"
uYFOE`
7E]V!U
87hOye
S=h9hjr
Tc^hav
EOaQ{fd
<U%P|
4wnD9c
}@@m;a
XZsSq-%
]#EW[>
=Uy 0-6B
#p;GWp
A`N+2N\
T@cp"=
1j?lJ
p$E\#7
QuJMru
(cP68,
Z7\P.
P'WqsK
ezR9:
L+{L6b(
S^bgQL
& bVa\g;
2,Ul>~
NGd;cz
<PWTf'F
|p:7Cu
e.a0Hu"
dS>h'm
/&vE49
t{=Nd.;cQ`
q}MCd)nc[-&i
u\mH{@ZeR
%@9({"w
L S><k
c8^!l]j
RYZ,5!
.grRnf
}K M/0
zXN5QN
?OV!;&
a]{_OWO
y:Uf&(
]F#S0a-
Ai 1Nk
zG\jkPI
&(jMR9!
H~VFM]}N
bI-/]&
W\P38Kj
w4w>w{
rMCBLhL5
_[.v$z6
D,cEjA
EtN$F4
\wLJ;Cy1 HC
:bRMdZ
8amh8F
>QPnHL
I5n[|tF'
:T0p|iF
ne^`d}
O3#oWG
cyjw8 4
H%9K;J
L,D2>&
uwCLzt
@E%zUD&
Rg:Z=qH
[J%zO
!$r#cx+
.Ld:$r
aaF89v
XwE(~F
\Hs`qy
E~dOMj
wQ|;7f
x.L3ix
r/t|pc
('d=w7
G{FHK,
(wHJd#u
!Rb {2
y`UKd+
XU_fhv}v
]@v{Y"
O8}yYf
}`(rH$7
87{Sb r
XCw:dN
,sHCb}8
:/P8}?
7~Hs)o
n&=E`hk
;T+dKAH
[,]O`C[1N
{t&*A{)'y
_aLdO"U
*J~v^T
smvRR/
;4>NfN
#whN*3)\
?1nC-
LdaiC9d
x/@XQY
n>c?.$er3
UZ$Ga2
}a*)D?SJ
]($TTq
Tqn::<V
"1~|\o
WB{YmZ
Zhy#V.
EE25Th
"_0/~r
+LrC}
{,lw0[6
cHsiTH
A",K6j$
1EOn<$
s2091+
>y6aAuD
!T"So{
fBz[O%0
SwjUq
8q5C{}
uNu |FV
F]KTnf
i#djTv
{?m%q;
y8N{s[?
r]:f5s(g-
?vY)[4$
vg1w0AC
\$ToNZ
uNjWxs$
r1]76ZA
f*p4 E
N\5}bV
;|L;}~
#ck1ns
gpK^\
("5Xr]
s+~oB/
St#]?g
Hy%lJj
{oMs4@
t>sZM|
d?k ob
B [$N6eK
/QGaeJ
Gp>6tl
mn{Wv$
SoARuxa
2ei">1m
[Vu':Y
#-sWr|
43Y@Kq
vqxV2A
Zh<[b_
9[Ryy
x8(6c6
{"$+6$
OYZ<>=}
nn;hAi
QhvZAI0
XFZv;Z
:=LiFQ
KO)x5E
Pq6}p(
mByI!T,
b(|]Z=v
xe'?Vd
mIK!jh
$[J%"-
ZCcfyf
d@^hV}
r+_EHEp
t_/7
5V.rw;
L[pW*4I
12"9_
@4|bHy
`>c(+h
fI.8cKE
}+Q)3O
t}N]_1
9s|SLw
lOdW$7
{:zFi3
x|q."7
v6rgVT
%5z; dT+
ezI6 /
NngKOF
41IKp)
7tBU8p
p5m%**^
P2{d'-FY
mhs<WPfC
;M}OaS~
'~.Z%G
5S|g$Y~'
:"=S9\vM,{
jWv.{"w
`?cPD;
>:]@g3
T!LYtH$
tfev&j
Q?8RfX
m>R_#s^
b"{u6%
rxUCP:
= +UH]2
eG"+t
/b+#\d
k+\:_o^?
.fmtFk
P{?#TI
#+d>sO
ce~ e^u
/d7SZr
0%n,Tfb
~4]YX
EJ[_IN1o
5-r-N
h2u/0*g
x|-V/@j
$3&ucP
P@B6n_wh
9[}]Td
nt@j[S
-m!05
17Vo^R
L|:j<r
_ueRWN/
iK4c%wt
ZvCEv#
;GC6('U$
'[/}`x
e2yMA
@fEpfK
.]iSp
-;jZ.S
$k!rkn
t!\_zA
@EmCoO
%k%@HJ
Aazjne&
ONb"N
N%mk29
W0{F +
X |,xk-
%&ov&G
s5Q.2|
w8&$K<F\j
cXe>vW
P*09JYA
0T{`jJy
mM\JW}
n2AQ/Qn
,\}n2d
lEPpX{
Y>`>8&>B
z,n<62
VA<I&Jm
f)mwC
#xIyo
%*bgNk
NN1#t`
?Jr+>!)+C
<[&-hC
8v]$ck
20Rz6X8
wc]2'qP,
X]Gn$H
0X<7r/
Tg51]X
Xbgh&O
<\EPC~
o=/evy
JE} /V
uOq*KB
HT7|]}@
^6#WM}4
DY0f{0
`BE/R,
:W"/zu
P_Ie5z
,L(x0Y
7-~/}w
3aA^8 "/a
"tl4%,"
'e]!g(
<4Xmjj#
VL)gt5
/U#dY.
l74q'^
-GchqP
6-;4Us
WLFH;_
rh?uz;8[
u&B3+<
1/;Jw7
_S-cm_)
Xw|Lt8
]eJ_J#
|UV'pQ
g'K9yF{H
b Lz@T9u'
u/D^`~>
OYLHg\(g
=[^3_q*
JrT++h
&3ZS:iY
9Vg+.#P
c-_.=1
_g5X49t
k2.0'LQ
n~qY_)
}"7a<9
)to F>OEG
&?[}S>
CzWMtYW
NyW+~qs
O<~}N\rcQ
<aAH>p
;mcOh(L
x>ldG0f
n)1:@w/
]fbMsL
~de7UK
Rz4E0;
lgZ33$[
W~d:V0h
aIrK{k
?grYH
@:cI6b
'4L{"9-
#=iHgg
3cj]x8ow
6,CS(K
9HXN.^
H\0YhP
p52Ql~
h\ZF/@z
\'Fiw`d
E.nfJU
GeZ?~A
";+|\_
+^vG@[
Qb{kQ1
dBb/ p%
nv j<,
AN`|um
8irNl"
+N,+1=
AVy7u9
1cW+9>\Dg
VSBWra
K.ct'%/
wj;"0q
Y+Z:C:
lnSeP_
})u}#*
~1%!QE
L6{j+g
fYdf<$8>
N"zO<-Ob
*$opli~
eR-8WK"
<=ou{Ab
Hp+tZ8
9@8BjX
27>,i`
}Z#mbl
.KPMw<
'Hg}>"
>%\;he
2uhN{
JNt%bJ
/z<P5=n
(oU=_.
DiiH:F
g.aU$\
K-&%-r
W/,wogg)
\G3XOWj
JC:uC,e
@_CUX4
S(= GCK
.Gsl.]&o
roKNN g
4(#xm}
`6XHE{
~^mk0*
OSBWU1
nlyWIho
f51_M&
KsC7g
N(w;U{}i#,
DrtTdG
C&|p-%
v"0f(,Q
eOrtAF
a"ZUyw
B4+KwQ
\@f(h5#
=!U"JvU
G)}]U3B
sK^hTp
!y<AO"
m ez>r0
%5>Y^V
/00`GG
fKzo)B
F/0RN`
iQE)(2
,2Uo2/
3M.i3y
|OQh)9
E?(0(|c
UXwJUp"
tUKj&4_s
ZT#W1B
4_gt]N
q%j*-5
@4$j!O}
V9^RnM
M$8U(_F
|SefN/
XUcRid
DR uW4z
?)PI'FV
aPyL i
Nn?p2;
8#DH_'
,;O<df
S*+NVi-@
Y"Mz$f
WM=q(|5U
-Z >F%
ypK~'o
3T;h&vU
Mn\[r"
8Nd'o=
(&l#.H
v&qo_/
v=G@;|@
o/slNk
Bc(*sR
l9MKbv
'$`ts.]
q_`O4m|_tK
'\S2TE
?v|WC
`GHeZ:
%.:pjM$
/+ysaI
19LQW(
EGeM=k
4..30s
iDY^)e
Tu\:!7)
tXNHwa
wGN!KA
{T|2{t
oB_Y)2&I
3;8oLcY
vA}^~a`
'^VAUk
)Mn\&E
#f2P.lQ
!H|D)
u^o;@9
aPQTrH-
8>xc^7
AjJB@(
]$~h9Bx
8m<(=Rb
a2ngp{
u'!u}~
?g/8 8l
D9euk|
i+=`EkA
o&!FbZu}Z
8lMS.L
}5~Ib(
T\lGm.
3;I%{nn&
NOK4?=g9
X\Mg2:
H[.e7-&}
}HBu0P|
kI)E)9+
Ax%MEf
C#C)hF
_Xe={)
p\GP|L
E,{rtp
9V/|66
ZIGl7%
<vsM2%
hpfR"rj
>GUe{,w
ol|(7$n[F
6Ybb!|_
!<XO_?
x}+f q
?e>q(?
}Jj:+M$k
$oaZn~
o8+yX;
nbJ1X~
lAP=c22
*A!SF}
t+,\,`
,z?R0H?
9L^Nav
@W`ic2&f
MJ6 3CJ
4'U._x
f_y^?*
\zY[ZE"
4oS}Nd;
H{ty7}
ja!x.Fn
oR{>|H
Oy"-@XV
^ET'2z
"7S+L"
y<048w9/A
RReL"o
,6?MU!L
J#5~lf|
l_27zdC
)0JB)'
_(zBwX[|ln
[UT6VE<
1>C{Gj
#z\JZYB}
>"[|H):
'>TINS
5o|-^:4
*b(1<>
4ZR`mW
sI4z z/:
p,@>1*
PEplg2
`-JU/$
<}dJ^u
zveW:C2l
Dgm~u8
4x(%5QIiO
wIO40a
C&z#u
0lb71niB
s8]:l/
el%k#[
^]T3&]
aL&I/va
gp&~Tk
tv 4=N>
Rj>Tj`
%~V\M3
c)~>vc
nu4_N4
`\xnMR-jN
hZdp|V
a7/:M~3w
Z2*s^t-
^Hc;@vn/b[
jlv$/%
`(QG%
y-^D>-
<!r[0AW
1C'X5ayH
D%FuKL
PwC\xBUi
)3v!D7
j(#fcx
{-eqBM
`N73o.z
&r_P'<
sIXsW.ZK
4Wfzo|0b
OT#1uw
bHMBs;
[NpAUs
[oOudr
DC203
+V^G9ox
NKgs,"gl
X(NO/r
Iwy~'D\L
9kvY;LhC
RG-Za>
pWCr?%
eda#^.o
aiK++H
G1Sn|D(
oU2B,
\dXG$W
>{Wuie!2
_"o,\3
Q"Q-J7riH
s)!OP+
%[KjfM_
M]K/XA
`G-;8$
[u<ql-[
sYU)TObG{
-D/[ M
}Ce&E&
(K,hN>
;wA$^0H
+D7cAk
(k;_zI
n1bBlr
Wr2:YK
Q<n5#0q
pw;8e{
qks A^
+6SL70ze
-9c>}|E
/JpJns+
2\YJL4
{j[%Hj
Nm v7g#
o`"y1g
x[Xp74[
U1nzhm
NZ~$,UI
W]&PTV
?[4%vPq
-e3TsV
_W`9\_6~8d+
?xhYRLS
^:0'u]\
JG!%DWON
<Vaj\
!Lr0Q^
m]^D%:
9*3=|98
"*d8B.$
a714ox:
yD?!&T
U?f0W]v
Jo&lyI
nj8y0C*
fn:&RH
`0c$O8
U[~[6p
1/!+!u
.XU ]T
!>&btX
QI>Mjm
}y|z,*
!KT/Fl1
cCP`E:0
{?SJBrhU
!f}h."
b#S>$_
Tl\p8}
WgtLdS
G|JXf_W1
iq]oR<
E"1f1T
HY>ipj
@Ry%J=
:b/K{E
|*vn7L?{)Z
M]OLs.
)rXN(+D
[Z@f!w
wCBvwY.
"dn7]~R
ATV0yR
FS_"2+
{`:|>@7
nI)[AdD
4Et4c}
`XyJ"P8
&zc% Ybu0
\XpH?!qowG
hnb*P
<u1L1[
&Z}fjq
7t$Sj\
|4uf<
LGADiP
M=JHhx
>#drx(
usD}_2
rfaJsjl
(tt4wJ
hIzPG{
3ENF\(
0^,#.bp:40
`#&K4T
la=FN#
Hi<4DG|+
Y\&)5%
"N4,3,F
}#NB_U
ag&|om
c\x[4n
[tbrel
S7+[nm
A0HB*X
$moSC,-
M6_l2~
<K@=Va
7[:H}!f
;!<k#+
JPsCsP
Q\* %+
8^;7IYS
<, eop4_[)
@S-l\@3ec.
R-M!yM
iA'')@nA
8>6VvU
'jc=)'/
r2ni&;
,l~a/D
GFUBHi
v3/F{}G;
65j% dU
!kChyH
x85-hP
g$c@%V
cRG6XF
k6;Jf)
cpg<~Fv
wmXtB.
cXjX\L
S-?0hn
uzyA`c
,I]npG
W.8z'u
9dP@ykh
lg$@V-
X-dbN49rm
6cs!.
%p+$C&D
&Mv~0Z
8r8f#R
xmu<OQ
ej%B_l
CGkp5q
)R:|;n
HG)C{
Xxc$I&
\/_a/3
@0<%sk
R=y2|$
6tP{P
ix}u5@
I1PxHs
&/mtN<
Xojvcc
Z%7v6M
vIyH-G
2@LyD9~$
mh,V|7.
gS}Hz.
}H*O{=s9
ZMFa6.
:Z|eSj6-UU
a8RJz(
!X[<aI
UO0DA"sX
90/tTP
-kIR.Mm
p16RIb
R!j)GS
.NOg2F
G|fgq%
:p<E5@
Sj(/KC
4H\+&M
24eX0/u
BQU)x:
(TmpJ^\
CC"r":
l6C<Yw
o~FT?5
UDpj3t
M*Jdc3+
1K8(RW
n5Z8TS
qnP3H.
mBb/SQ
nElX'S2
^O$AIa
rCe9.
NuV_Nl)h
YRRYx{N
U/j2OL
%.>/kG
iY.!"M
L=.rC-z
G%pN#P
tGM}$`ky
TbwKv1Tx
yQK<\6
W,.eY/
Bb%vW-
ao{/hF]
fsl{~
#vB*ao
IHV2<-
N@W/V|
}B(|[_
"wzEink
Y[5VGloM
as}O^
xb,0R!
OQ4ghE
f6Y%`W
5A'T j
. K8bZ
@;JqP2
MIkD'L~5N
`KnEY6
^w=ckeG
F=GUC>b
c{l)!H
5E<Vj\R
8b! A?
y6o5T<
cRFh2,
t4I T/
4@s3|v~
2|vYx+E
soq<Kb/y
KC;w~\
jR7ok"HH
s^*PP|
0uf%bK(
SxIjaj
x"&FA~?l/
YXAY`-
'M/]lxE
>=Q9JW
+TnY9H
u_EhfW
sY&^t)
RMwFZ>0
\\giPtF7A
s`<eF
H|Nh2e
X7]LA>
&~.^"E
Z*9?jLb
unO!.4"
k?4FZR
Oru:Om|emyC
z%NZs9W[
B_|6u0
q[U~9"
]\eOzS^
9l3,+C
-5tT'=
s"forE
+3Kbib^
\1!V6*
h%mS3&
I!6"xQ!
5J@"62
F>\RP4
tbcBI.11
&}o?k9
381`GXA
h21TgS
"w23iZ4S
ux"EnFka
*NZ!F/
zjT,sz
08ZGp
3[uHk4<g;
-q}LA&
?@c{:d*:
>lI?F7'
eK2],%
0T3Ttb
MXich]
vXLSS-
n6`Hjl
?KAgA`
Dg~Of[{
d_hF3A
jfpnRY
}r'*J3
yWIjB
D]~!z+<
lL%TpC
I}daZ;I3
(,U<Fq$
o2L1rAd
+=ST#C
1c$@R)
*li"@1r
l7bZ{,
k \3m
`1'!sA
4]+.B]+
n7W&OrC3
j')V+'J`?
O8[EPj
dfsrV*
3-T^";
<_79K"
=zZR2(9dF
iCIh#*
!J,H8~s
f9q*Qmc/
z[),XXi
smxQKo^{
=Q,.=/
go$.+iTrx<
"]U%co
!g;Jt!
mN"{yJ
f]$%~w
7Zcq}M
oJka0%+
hfy'g!
#n/vFaU
~^XudA
}m],Lme
pTcH,V
cf}p=.r
>#_SKV]
WBfT"Q]-i
xF%F`<x
D%utgX
|w]j P
\1,buM
7}DM#E9
6Z2y8<Hu
U1ISTaZ
-3Jnk-k
GY:jB:&k
LJiO&1(
&wT{9V
OMf/%$
j7$?>q
#yH~i=X;
b^*WOe;
PGDxOZc
htXZknd
h9.r?9
XnK<#r
2H%ir`
H#l14l
~3_#N&7
ox'Yb4
)Rd[ud
!NYnYomE
h%,kH/
]tt}v[
pK.hu"H19
vw+o%,
~kYV\46
Ik8UY9
l/K9]=]
Kr(ofO
z0W,;A
{V%U~U
>(soA)
\(1gSQz|
KHp%;[*# A
z)yK!M
irD`8$
=g>3Te
rJfU9J
-W-)4A
[B~^C0
bsM RW
rU9Q8@
S]$vch
H0N8my
,N07$%
:q3^bXm>.
UIKOx6E
R`E&>A
I? :iMt5
v8;0K?
)}ot'^
5\nq*<
"<gIwQ
SzG<o;
\\CPt;m
32u=|?
GrP4>rG3T#
Hdid]/q
o4TADVf
+z6Z{W@2N
3,UVsgi?
KToBy$e
5!zlit
}MC^Sf
HUH8un| 1
.$5>{G
~bwl>Z
xg_@`E
PoCTr`d
2g$rrE
zR*He,gr
~e>N5~
aI'81r
n7XO`*
zRa|.B
+^9/|p0:
a%mz?o
v2Bd=d]
vgUu9|
&N6mY[
{C6;5s
-(`=qi
G&}^Uq
1{UWet
`P9Uaq
UFl{su{
m;<V-Z
oQUAgtg
AeDqjc
wobfLd
l2BXbL
$_YR'@
]Oc(]f
kNOZ(L
rsx#4
bd` c'
Ee}Rq"(
'T5?f0
=o%`[wp
|,O9D
emjQYe
PPyYjw>vTb
YQ91%pf
J&@8GGzd
N>`LiMF|rJ
tj8!v;
QP<CS5dtj
)4>|Uc
`R_\fRc
g24n#H
=Z*&mm
{AO(I9d
u..XA0
*bjQO'
M/$sv@`_
}{84CL
|'w<\L
Qq=h?&
:+f*M'
^g#uEh\kXA
nFz(()UFV
7.f`nt
4%3E7Q
v1BNa&
` e(+$
AP'7K#
es)-\P
f=)+&e
x#tzV~
<D[>O8
J,-5Oi{
Q[RJ~e/
";8I%
XD}l&>
E"-KKdQ
a}9'DV
A"xS],W
tahC"Cg
\1kmRO
/Li<;]
fo0(2>=S/y
W8/7Xi
(:}/`I}
2515Vh
,a,j0
APVem\
0~gYNE
Sb3+/;w
sMX79
!j3=7#
zMId/R
>Qij5M
i*@auA
mof..F
:Ocb^9cT
+M#fG3
SC9dOA
OQL)>D
#= T%2O
BMU=6*
R1.la3Z
z;~:L%u>+a
gNF3w
Cw=%3v
AUY"F~
wgzLmo
Du)V/[
nl%K6I
1 )j>N
/@[-M~z
#rvy#E
Y<c+Ip
.QVQhEd
::]U4S6F
(QHYFX@nh
.-,wg^I
VcaH3 W}
!}Ep)m2
lE3~-D
Ip!mJ3I
nOz:Ok
l%uW;
LHt|_=
MDAk)h
b0)1k{
{OT'4[
$H$b{`
y;MwD2
fN1s $
)#t.{B.
1}3vU||N
l>0F?~4
#"8(EI
|)$jHM
d4kJ[YW>
xK,I;t
g#"kpg
&hw?oi
^e'bGC
;8$Aw!Q
8EXE*(f'^
-[l5>W
Veh}E[4|
P* .z^
pfmu\eqc&
{&rK^m|
s+02d)'
-\<Px
V3zq/2h
oiunQ,
H$b0DL
?{ !&X
&Q!PC"$
EpK_;Wg
EEx&|]
%@V\XLu
VqPwBy
L!jdWQ
4Im&c%o#dv
***r]^
7{<&Dn
.]4kgv
l}-Jj]U
kLD;3`$N7M
ISbO_$n
>9eKXS
I*hi&a
xyY_Pq@7
r{h_k\
eWl'{uh
ql;53r
zVH\4=
"FZ7nG
E<!>PO
"t[t82
S$QWwE
))`N4V:}
Khfm<G;z
J|akvo"
52eG~2
d%Ng.-
!0:wUj
2/WQ~/p#t
&Aj=>h
D2U^(M1[
nItS6\
?o"3z3M
,s|Zz)
7(g)-=Dv_
y*?gU
;-rLIw
n{g"H{
bpz (^1
Y5{ay7
%/uBwq^
^+YXD_
/"6/V}RU
G6R:%H
j8gX^5
L+z,oZMk
1YqWwO
\3qL4q
7d8k|Ul
^s-+V>
X0(,6^
|~P3 6
`\{vkI
,:]6@_~
)l\>Sm
aA:$]TI
sLnlQg
~m]w<B
%EFTI?
Hwlt[1
!IhOTL
vzSE1O}
g%1?;t
-NSf]?
#a_&>v
F-%3rD
0ZNy?^
>)JY_/
AM!^f*
VxOBS8
$k hQz
zgm&eD
uP@+tK
,"&uS5K
z2?4Yz
8p/+/[
{w,.W7
>npxUw
<#xyB.
r^Px26
oG[#p"
Z2h_({
X;{?[tCb
'u Kzc
&&P*)'
^YY hV
M-{/}1
9!owzO
O{53<H
QHc@i'
Go9F"4w
p~GIgF
b$xbm(
xks9Xynq
&z)@|?
)cO-=>q
}XXO$Z
$"'/vX
T=L-oR
XaW D
hwDOC1"
R401hK
Je1b@xM
X/,+YM
B-tB$*g
)!#E}Y
_Kojaxyu+
Tdgp2A
da:'xx
M&jMF"
)QB,l!dx8'
`Rj5#o
At>,%P
&c2YP5
Uno&2|
vZGEK6
,XO]e8
Ic84>
Q}dQYJ
rkM:xB
hTmISSI
glbknl
t~Kc4\
pQ?d}D
E`#:oS
NDY>rp
"TLvUs
B}8CKSJ
{b~\vL
t ;|KSS]
H--JYN
A[aRiM
;ra7?+
\Sl+,qo
m^>}8`5}
c%5~4Q
os52]S0
jS.T/E^
SIb*&M.
uPxlRCs
gl46?m
M:'J(D
Z05"~V
=m-<*%K
4|x8#zd
eK9ly)
yh:_P5t8Fs
_y4z~_
>;qHVPo
A^`G;,
m5p,EJ
Z+W?Po@
:[pqHp
{iqx"\j7
\#~E0D
Z=}PIl
ylmC0U
Kt35U
Q$z#_S
K+\|=n
0#tW@x}f
S\[81w
{%n&~IZe
aK*=FeF
vc%i&WR
=T@X2p
^y90e=n
>/EIu
~E<);
6W\C"J
'GY:/20
fZ<OP&W6
#o$.'u
UJp_(1
pm^=,
WP~X.-
f-u^Vzu%
0NgEF_!
Tp@j3
jT^^OU
s2Xj,P
I=EIUv
_W)I4^
;tRA+i
n;AK]4
QL$3:hOZ
<pT&h&
.[c@=*<
NugASdTZ
MUoNYFV
/IR+(2
l5OqAu
nX1o'
TL"7RZ,
>=B/<HT
=nTXm)jCkm
r.U#\o
GE,amV/
: {3Io.m
ueCC[8(-l>
`%C_%
{=g>kkDn
R9Oh:s^
$(gt_I
l?$R|'+
T%5'0<
$bq<`Y?
%?ig_'
.qgdVGgV+'{q
wqVU#?
<W/oU#$
S=lEZi
8r# ()x
f^UR;]
1bfbp-
?a/1Nf
7AM:F9
QUySrc
UP|-'hxf
1" UHS
aBf3=<Z[
HC2xY4
.G&Huy
&3z OF
b^rmy
9E3W4H
&DptFx
)nIM})
x&Uji}J
24&Coz
jG8IR4
#ugRe}
k'O>YO
$<Dwl}
&8rOk{r
oaDqKk
~6q>Xv
U{M`RU
~<km]K
X>\eGpIM A
+R9/;U
Hh<"0)^
Pu]x#z
fRVM<@
/\MJ^8
qZr7,&3
qQq1#GA
2|a?!f$$
$q#@G|
5=(_2+r
+%m*%~
7yz_f3`
E$[D(~U
R{?TrS
sy\Sy[L
wvqLj0
T6dE@&
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Windigo.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Mikey.148495
FireEye Generic.mg.d52a5f6d591ea015
CAT-QuickHeal Clean
ALYac Gen:Variant.Babar.226209
Malwarebytes Trojan.MalPack.GS
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Gen:Variant.Mikey.148495
K7GW Clean
Cybereason malicious.1e9468
Baidu Clean
VirIT Clean
Cyren W32/ABRisk.HSLQ-2607
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win32/GenKryptik.GLVZ
APEX Malicious
Paloalto Clean
ClamAV Win.Packer.pkr_ce1a-9980177-0
Kaspersky Trojan-Spy.Win32.Windigo.aoc
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Trojan.Kryptik!1.B663 (CLASSIC)
TACHYON Clean
Emsisoft Gen:Variant.Mikey.148495 (B)
F-Secure Heuristic.HEUR/AGEN.1303617
DrWeb Clean
VIPRE Gen:Variant.Babar.226209
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Lockbit.rc
Trapmine suspicious.low.ml.score
CMC Clean
Sophos Mal/Generic-S
Ikarus Trojan.Win32.Krypt
GData Win32.Packed.Kryptik.D45ZR5
Jiangmin Clean
Google Detected
Avira HEUR/AGEN.1303617
Antiy-AVL Clean
Gridinsoft Trojan.Win32.Kryptik.ca
Xcitium Clean
Arcabit Trojan.Mikey.D2440F
SUPERAntiSpyware Clean
ZoneAlarm Trojan-Spy.Win32.Windigo.aoc
Microsoft Trojan:Win32/Casdet!rfn
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.Generic.R591766
Acronis suspicious
McAfee Artemis!D52A5F6D591E
MAX malware (ai score=80)
VBA32 Clean
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Trojan.Win32.Obfuscated.gen
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/GenKryptik.ERHN!tr
BitDefenderTheta Clean
AVG Win32:CrypterX-gen [Trj]
Avast Win32:CrypterX-gen [Trj]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.